If you opt into 23andMe's Research program, your DNA and health information can be shared with drug companies and biotech firms for research and drug development purposes.
If you opted into the Research program, your genetic and health data may already be in the hands of pharmaceutical or biotech companies, and opting out going forward does not retrieve data already shared. This is a permanent, high-stakes data sharing decision that affects not just you but potentially your biological relatives.
Cross-platform context
See how other platforms handle Research Program Genetic Data Sharing and similar clauses.
Compare across platforms →Sharing genetic data with pharmaceutical companies goes beyond typical consumer data practices — your DNA can reveal predispositions to diseases, ancestry, and biological family information, and once shared in de-identified form it cannot be recalled.
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 9(2)(a) requiring explicit consent for processing special category genetic data, GDPR Art. 6(1)(a) for lawfulness of processing, CCPA/CPRA Cal. Civ. Code §1798.121 treating genetic data as sensitive personal information requiring opt-in consent, and FTC Act Section 5 regarding unfair or deceptive practices in data sharing disclosures. The primary enforcement authorities are the FTC, California Privacy Protection Agency, and EU lead supervisory authority.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.